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Abstract. The. fully enriched ^-calculus is the extension of the propositional /i-calculus with in- 
verse programs, graded modalities, and nominals. While satisfiability in several expressive fragments 
of the fully enriched /i-calculus is known to be decidable and ExpTlME-complete, it has recently been 
proved that the full calculus is undecidable. In this paper, we study the fragments of the fully enriched 
/i-calculus that are obtained by dropping at least one of the additional constructs. We show that, in all 
fragments obtained in this way, satisfiability is decidable and ExpTlME-complete. Thus, we identify 
a family of decidable logics that are maximal (and incomparable) in expressive power. Our results 
are obtained by introducing two new automata models, showing that their emptiness problems are 
ExpTlME-complete, and then reducing satisfiability in the relevant logics to these problems. The 
automata models we introduce are two-way graded alternating parity automata over infinite trees 
(2GAPTs) wA fully enriched automata (FEAs) over infinite forests. The former are a common gen- 
eralization of two incomparable automata models from the literature. The latter extend alternating 
automata in a similar way as the fully enriched //-calculus extends the standard /i-calculus. 
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Figure 1 : Emiched /i-calculi and previous results. 



1. Introduction 

The ii-calculus is a propositional modal logic augmented with least and greatest fixpoint op- 
erators ||Koz83i It is often used as a target formalism for embedding temporal and modal logics 
with the goal of transfemng computational and model-theoretic properties such as the ExpTime 
upper complexity bound. Description logics (DLs) are a family of knowledge representation lan- 
guages that originated in artificial intelligence IIBM-i-0311 and currently receive considerable atten- 
tion, which is mainly due to their use as an ontology language in prominent applications such as the 
semantic web IIBHS02I . Notably, DLs have recently been standai^dized as the ontology language 
OWL by the W3C committee. It has been pointed out by several authors that, by embedding DLs 
into the /i-calculus, we can identify DLs that are of very high expressive power, but computation- 
ally well-behaved IICGL99I SVOl . KSV02I . When putting this idea to work, we face the problem 
that modem DLs such as the ones underlying OWL include several constructs that cannot easily 
be translated into the /i-calculus. The most important such constructs are inverse programs, graded 
modalities, and nominals. Intuitively, inverse programs allow to travel backwards along accessibil- 
ity relations IIVar98ll . nominals are propositional variables interpreted as singleton sets MSVOlll . and 
graded modalities enable statements about the number of successors (and possibly predecessors) of 
a state IIKSV02i All of the mentioned constructs are available in the DLs underlying OWL. 

The extension of the /i-calculus with these constructs induces a family of enriched /i-calculi. 
These calculi may or may not enjoy the attractive computational properties of the original fi- 
calculus: on the one hand, it has been shown that satisfiability in a number of the enriched calculi 
is decidable and ExpTlME-complete ||CGL99[ ISVOll IKSV02I . On the other hand, it has recendy 
been proved by Bonatti and Peron that satisfiability is undecidable in the fully enriched ji-calculus, 
i.e., the logic obtained by extending the /i-calculus with all of the above constructs simultaneously 
IIBP04I . In computer science logic, it has always been a major research goal to identify decidable 
logics that are as expressive as possible. Thus, the above results raise the question of maximal 
decidable fragments of the fully enriched /x-calculus. In this paper, we study this question in a 
systematic way by considering all fragments of the fully enriched /i-calculus that are obtained by 
dropping at least one of inverse programs, graded modalities, and nominals. We show that, in 
all these fragments, satisfiability is decidable and ExpTlME-complete. Thus, we identify a whole 
family of decidable logics that have maximum expressivity. 

The relevant fragments of the fully enriched /i-calculus are shown in Figure [T] together with 
the complexity of their satisfiability problem. The results shown in gray ai^e already known from 
the literature: the ExpTime lower bound for the original /i-calculus stems from IIFL79I : it has 
been shown in MSVOll that satisfiability in the full hybrid /i-calculus is in ExpTime; under the 
assumption that the numbers inside graded modalities are coded in unary, the same result was proved 
for the full graded //-calculus in [iCGL99il ; finally, the same was also shown for the (non-full) graded 
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/i-calculus in IIKSV02II under the assumption of binary coding. In this paper, we prove ExpTlME- 
completeness of the full graded /i-calculus and the hybrid graded //-calculus. In both cases, we allow 
numbers to be coded in binary (in contrast, the techniques used in IICGL99I involve an exponential 
blow-up when numbers are coded in binary). 

Our results are based on the automata-theoretic approach and extends the techniques in IIKSV021 
ISV01irVar98| . They involve introducing two novel automata models. To show that the full graded 
/i-calculus is in ExpTlME, we introduce two-way graded parity tree automata (IGAPTs). These 
automata generalize in a natural way two existing, but incomparable automata models: two-way 
alternating parity tree automata (2APTs) ||Var98ll and (one-way) graded alternating parity tree au- 
tomata (GAPTs) IIKSV02i The phi-ase "two-way" indicates that 2GAPTs (hke 2APTs) can move 
up and down in the tree. The phrase "graded" indicates that 2GAPTs (like GAPTs) have the ability 
to count the number of successors of a tree node that it moves to. Namely, such an automaton can 
move to at least n or all but n successors of the current node, without specifying which successors 
exactly these are. We show that the emptines problem for 2GAPT is in ExpTlME by a reduction to 
the emptiness of graded nondeterministic parity tree automata (GNPTs) as introduced in [IKSV021 . 
This is the technically most involved part of this paper. To show the desired upper bound for the full 
graded /t-calculus, it remains to reduce satisfiability in this calculus to emptiness of 2GAPTs. This 
reduction is based on the tree model property of the full graded /i-calculus, and technically rather 
standai^d. 

To show that the hybrid graded /(-calculus is in ExpTlME, we introduce fully enriched au- 
tomata (FEAs) which run on infinite forests and, like 2GAPTs, use a parity acceptance condition. 
FEAs extend 2GAPTs by additionally allowing the automaton to send a copy of itself to some or 
all roots of the forest. This feature of "jumping to the roots" is in rough correspondence with the 
nominals included in the full hybrid /i-calculus. We show that the emptiness problem for FEAs 
is in ExpTime using an easy reduction to the emptiness problem for 2GAPTs. To show that the 
hybrid graded /i-calculus is in ExpTlME, it thus remains to reduce satisfiability in this calculus to 
emptiness of FEAs. Since the correspondence between nominals in the /x-calculus and the jumping 
to roots of FEAs is only a rough one, this reduction is more delicate than the corresponding one for 
the full graded /i-calculus. The reduction is based on a forest model property enjoyed by the hybrid 
graded /x-calculus and requires us to work with the two-way automata FEAs although the hybrid 
graded /i-calculus does not offer inverse programs. 

We remark that, intuitively, FEAs generalize alternating automata on infinite trees in a similar 
way as the fully enriched /i-calculus extends the standard /i-calculus: FEAs can move up to a node's 
predecessor (by analogy with inverse programs), move down to at least n or all but n successors (by 
analogy with graded modalities), and jump directly to the roots of the input forest (which are the 
analogues of nominals). Still, decidability of the emptiness problem for FEAs does not contradict 
the undecidability of the fully enriched /i-calculus since the latter does not enjoy a forest model 
property IIBP04II . and hence satisfiability cannot be decided using forest-based FEAs. 

The rest of the paper is structured as follows. The subsequent section introduces the syntax and 
semantics of the fully enriched /x-calculus. The tree model property for the full graded /x-calculus 
and a forest model property for the hybrid graded /x-calculus are then established in Section [3] In 
Section IH we introduce FEAs and 2GAPTs and show how the emptiness problem for the former 
can be polynomially reduced to that of the latter. In this section, we also state our upper bounds for 
the emptiness problem of these automata models. Then, Section [5] is concerned with reducing the 
satisfiability problem of enriched /i-calculi to the emptiness problems of 2GAPTs and FEAs. The 
purpose of Sectionals to reduce the emptiness problem for 2GAPTs to that of GNPTs. Finally, we 
conclude in Section |7] 
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2. Enriched /i-CALCULi 

We introduce the syntax and semantics of the fully enriched /x-calculus. Let Prop be a finite 
set of atomic propositions, Var a finite set of propositional variables, Nom a finite set of nominals, 
and Prog a finite set of atomic programs. We use Prog" to denote the set of inverse programs 
{a~ I a S Prog}. The elements of Prog U Prog" are called programs. We assume a = a. The 
set of formulas of the fully enriched ^-calculus is the smallest set such that 

• true and false are formulas; 

• p and -ip, for p € Prop, are formulas; 

• o and -lo, for a S Nom, are formulas; 

• X € Var is a formula; 

• V (/?2 and Lpi A 992 are formulas if ipi and 932 are formulas; 

• (71,0)93, and are formulas if n is a non-negative integer, a is a program, and 99 is a 
formula; 

• fiy.ip{y) and vy.ip{y) are formulas if y is a propositional variable and ^p{y) is a formula containing 
?/ as a free variable. 

Observe that we use positive normal form, i.e., negation is applied only to atomic propositions. 

We call ^ and v fixpoint operators and use A to denote a fixpoint operator or v. A propo- 
sitional variable y occurs free in a formula if it is not in the scope of a fixpoint operator Xy, and 
bounded otherwise. Note that y may occur both bounded and free in a formula. A sentence is a 
formula that contains no free variables. For a formula \y.ip{y), we write ip{Xy.ip{y)) to denote the 
formula that is obtained by one-step unfolding, i.e., replacing each free occurrence of y in with 
Xy.ip{y). We often refer to the graded modalities {n, a)ip and [n, a\ip as atleast formulas and allbut 
formulas and assume that the integers in these operators are given in binary coding: the contribution 
of n to the length of the formulas (n, a)ip and [n, a] 93 is [log n \ rather than n. We refer to fragments 
of the fully enriched ^u-calculus using the names from Figured] Hence, we say that a formula of the 
fully enriched ^u-calculus is also a formula of the hybrid graded fi-calculus, full hybrid fi-calculus, 
and full graded ^-calculus if it does not have inverse programs, graded modalities, and nominals, 
respectively. 

The semantics of the fully enriched //-calculus is defined in terms of a Kripke structure, i.e., a 
tuple K = {W,R,L) where 

• is a non-empty (possibly infinite) set of states; 

• R : Prog 2^^^ assigns to each atomic program a binary relation over W; 

• L : Prop U Nom —>■ 2^ assigns to each atomic proposition and nominal a set of states such that 
the sets assigned to nominals are singletons. 

To deal with inverse programs, we extend R as follows: for each atomic program a, we set 
i?(a") = {{v,u) : {u,v) € R{a)}. For a program a, if {wjw') G R{a), we say that w' is an 
a-successor of w. With succi^(^«, a) we denote the set of a-successors of w. 

Informally, an atleast formula (n, a)ip holds at a state w of a. Kripke structure K if ip holds at 
least in n + 1 a-successors of w. Dually, the allbut formula [n, a](/3 holds in a state w of a. Kripke 
structure K if if holds in all but at most n a-successors of w. Note that -i(n, 0)93 is equivalent to 
[n, a\^ip. Indeed, -i(n, a)ip holds in a state wiftp holds in less than n + 1 a-successors of w, thus, at 
most n a-successors of w do not satisfy -199, that is, [n, a] -193 holds in w. The modalities {a)ip and 
[a]99 of the standard /i-calculus can be expressed as (0, a)ip and [0, 0)93, respectively. The least and 
greatest fixpoint operators are interpreted as in the standard /x-calculus. Readers not familiar- with 
fixpoints might want to look at IIKoz831 ISE891 IBS06II for instructive examples and explanations of 
the semantics of the /i-calculus. 
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To formalize the semantics, we introduce valuations. Given a Kripke structure K = {W^ R, L) 
and a set {yi, . . . , y„} of propositional variables in Var, a valuation V : {yi, . . . , Un} 2^ is 
an assignment of subsets of W to the variables yi, . . . , y„. For a valuation V, a variable y, and a 
set W' C W, we denote by V[y <— W] the valuation obtained from V by assigning W to y. A 
formula with free variables among yi , . . . , y„ is interpreted over the structure K as a mapping 
if^ from valuations to 2^, i.e., (f^ {V) denotes the set of states that satisfy ip under valuation V. 
The mapping tp^ is defined inductively as follows: 

• true-^^'(V) = W and false-^'(V) = 0; 

• for p G Prop U Nom, we have p^^ (V) = L{p) and {^pY^iV) = W\ L{p); 

• for y € Var, we have y^iy) = V(y); 

• ((^iA(^2)^(v) = y.f(v)n^f(v) 

• ((^iV(^2)^(V) = (^f(V)U^f(V); 

• ((n,a)v?)^(V) = {w : \{w' G W : {w,w') G R{a) and u;' G ^^{V)}\ > n}; 

• ([n, a](^)^(V) = {u; : \{w' £W :{w, w') G i?(a) and w' (^-^'(V)}] < n}; 
. (/iy.v7(y))^(V) = n{W^' Q W : (/.^(V[y ^ W']) C VF'}; 

. (j/y.<^(y))^(V) = [j{W' CW:W'<Z ^K{V[y ^ W'])}. 

Note that, in the clauses for graded modalities, a denotes a program, i.e., a can be either an 
atomic program or an inverse program. Also, note that no valuation is required for a sentence. 

Let K = {W, R, L) be a Kripke structure and ip a sentence. For a state w G W, we say that 
holds at w in K, denoted K, w \= ip, if w ^ ip^ {%). K is a model of if there is a w G such 
that if, w 1= Finally, (p is satisfiable if it has a model. 

3. Tree and Forest Model Properties 

We show that the full graded /i-calculus has the tree model property, and that the hybrid graded 
/i-calculus has a forest model property. Regarding the latter, we speak of "a" (rather than "the") 
forest model property because it is an abstraction of the models that is forest-shaped, instead of the 
models themselves. 

For a (potentially infinite) set X, we use {X*) to denote the set of all non-empty (possibly 
empty) words over X. As usual, for x, y G X* , we use x • y to denote the concatenation of x and 
y. Also, we use e to denote the empty word and by convention we take x ■ e = x, for each x G X* . 
Let IN be a set of non-negative integers. K forest is a set F C that is prefix-closed, that is, if 
X ■ c G -F with X G 1N+ and c G IN, then also x G F. The elements of F are called nodes. For every 
X G F, the nodes x ■ c G F with c G IN are the successors of x, and x is their predecessor. We use 
succ(x) to denote the set of all successors of x in F. A leaf is a node without successors, and a root 
is a node without predecessors. A forest F is a tree if F C {c • x | x G IN*} for some c G IN (the 
root of F). The root of a tree F is denoted with root(F). If for some c, r = Fn{c-x|xG IN*}, 
then we say that T is the tree of F rooted in c. 

We call a Kripke structure K = {W, R, L) a forest structure if 

(i) is a forest, 

(ii) UaeProguProg^ R{a) = {{w,v) G X 1^ I w is a predecessor or a successor of v}. 
Moreover, K is directed if {w, v) G UaeProg ^(o) implies that t; is a successor of w. If is a tree, 
then we call K a tree structure. 

We call K = {W, R, L) a directed quasi-forest structure if {W,R',L) is a directed forest 
structure, where R'{a) = R{a) \ {W x IN) for all a G Prog, i.e., K becomes a directed forest 
structure after deleting all the edges entering a root of W. Let 93 be a formula and oi, . . . , Ofc the 
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nominals occurring in y?. K forest model (resp. tree model, quasi-forest model) of 93 is a forest (resp. 
tree, quasi-forest) structure K = {W, R, L) such that there are roots cq, . . . , G n IN with 
Co 1= and L(oj) = {cj}, for 1 < i < fc. Observe that the roots cq, . . . , do not have to be 
distinct. 

Using a standard unwinding technique such as in ||Var98[lKSV02l . it is possible to show that 
the full graded /i-calculus enjoys the tree model property, i.e., if a formula is satisfiable, it is also 
satisfiable in a tree model. We omit details and concentrate on the similar, but more difficult proof 
of the fact that the hybrid graded ^u-calculus has a forest model property. 

Theorem 3.1. If a sentence (p of the full graded ^-calculus is satisfiable, then 93 has a tree model. 

In contrast to the full graded ^u-calculus, the hybrid graded ^u-calculus does not enjoy the tree 
model property. This is, for example, witnessed by the formula 

A (0, a){pi A (0, a)(p2 A • • • (0, a)(p„_i A (0, a)o) ■■■)) 

which generates a cycle of length n if the atomic propositions pi ai^e forced to be mutually exclusive 
(which is easy using additional formulas). However, we can follow llSVOli IKSV02I to show that 
the hybrid graded /x-calculus has a forest model property. More precisely, we prove that the hybrid 
graded /i-calculus enjoys the quasi-forest model property, i.e., if a formula f is satisfiable, it is also 
satisfiable in a directed quasi-forest structure. 

The proof is a variation of the original construction for the /^i-calculus given by Streett and 
Emerson in IISE89II . It is an amalgamation of the constructions for the hybrid /^i-calculus in MS VP II 
and for the hybrid graded /i-calculus in |[ KSV02 j. We stait with introducing the notion of a well- 
founded adorned pre-model, which augments a model with additional information that is relevant 
for the evaluation of fixpoint formulas. Then, we show that any satisfiable sentence 99 of the hy- 
brid graded /i-calculus has a well-founded adorned pre-model, and that any such pre-model can be 
unwound into a tree-shaped one, which can be converted into a directed quasi-forest model of ip. 

To determine the truth value of a Boolean formula, it suffices to consider its subformulas. For /i- 
calculus formulas, one has to consider a larger collection of formulas, the so called Fischer-Ladner 
closure IIFL79II . The closure c\{lp) of a sentence ip of the hybrid graded /i-calculus is the smallest 
set of sentences satisfying the following: 

• cl((/9); 

• if V'l A '02 G cl((/5) or -01 V ■02 G then {-01, "02} ^ cl(v3); 

• if (n, a)'0 G cl(v3) or [n, a]'0 G c\{ip), then -0 G c\{(p); 

• if >^y-tp{y) e cl((/7), then ilj{Xy4{y)) G c\{ip). 

An atom is a subset A C c\{ip) satisfying the following properties: 

• if p G Prop U Norn occurs in tp, then p G A iff -ip ^ A; 

• if V'l A 1/^2 G then V^i A ^2 G ^ iff {0^1, '02} ^ M 

• if0;i V0;2 G cl((^), thenV'i V -02 G ^ iff {V'l, ■02} n A 7^ 0; 

• if Xy.ipiy) G c\{ip), then Xy.tpiy) G A iff Tp{\y.'il){y)) G A. 

The set of atoms of tp is denoted at((/7). A pre-model {K, vr) for a sentence if of the hybrid graded 
/i-calculus consists of a Kripke structure K = {W, R, L) and a mapping vr : ^ at('/') that 
satisfies the following properties: 

• there i?,wq^W with if G tt{wq); 

• for p G Prop U Norn, if p G 7r(tt;), then w G L{p), and if -ip G 't^{w), then w ^ L{p); 

• if in, a)'ijj G 7^{w), then there is a set y C succr{w, a), such that \V\ > n and tp G 7:{v) for all 
v£V; 
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• if [n, a\tlj G 7t{w), then there is a set F C succ_r(ui, a), such that \V\ < n and ip G it{v) for all 

G succR(tt;, a) \ F. 

If there is a pre-model {K, vr) of such that for every state w and all tf; G vr(it;), it holds that 
K,w \= ip, then K is cleai^ly a model of 93. However, the definition of pre-models does not guarantee 
that G tt{w) is satisfied at w if is a least fixpoint formula. In a nutshell, the standai^d approach 
for dealing with this problem is to enforce that it is possible to trace the evaluation of a least fixpoint 
formula through K such that the original formula is not regenerated infinitely often. When tracing 
such evaluations, a complication is introduced by disjunctions and at least restrictions, which require 
us to make a choice on how to continue the trace. To address this issue, we adapt the notion of a 
choice function of Streett and Emerson IISE89II to the hybrid graded ^u-calculus. 

A choice function for a pre-model (K, vr) for 99 is a partial function ch from W x c\{ip) to 
c\{ip) U 2^, such that for all w G W, the following conditions hold: 

• if '01 V '02 £ T^{w), then ch{w, ^pl V '^2) G {V^ii V'2} n it{w); 

• if {n,a)Tp G '/r(tt;), then ch(tt;, {n,a)ilj) = V Q succji{'w,a), such that |y| > n and tf; G 7r{v) 
for allv gV; 

• if [n, ajV' G 7r{w), then ch{w, [n, a\Tp) = V CI succij(tt;, a), such that \V\ < n and tjj G 7r{v) for 
all V G succi{(t(;, a) \ V. 

An adorned pre-model {K, tt, ch) of 99 consists of a pre-model {K, vr) of (/? and a choice function ch. 
We now define the notion of a derivation between occurrences of sentences in adorned pre-models, 
which formahzes the tracing mentioned above. For an adorned pre-model (ET, 7r,ch) of ip, the 
derivation relation ~^ C [W x c\{lp)) x {W x c\{(p)) is the smallest relation such that, for all 
w G W , we have: 

• if '01 V '02 G T^{w), then (■w, '0i V '02) (u^, ch('0i V '02)); 

• if '01 A '02 G 'k{w), then {w, tpi A V'2) "-^ (w, 0i) and (tu, '0i A '02) "02); 

• if (n, a)'0 G it{w), then (li;, (n, 0)0^) {v, '0) for each v G ch(7i;, (n, a)^); 

• if [n, a\Tp G 7r{w), then (w, [n, a]'0) (f , '0) for each v G succ/j(ii;, a) \ ch{w, [n, a\Tp); 

• if Ay.^(y) G 7r(7i;), then {w,Xy.^p{y)) {w,'ilj{Xy.^p{y))). 

A least fixpoint sentence fiy.'ijj{y) is regenerated from state w to state v in an adorned pre-model 
{K,7r,ch) of (/? if there is a sequence {wi,pi), . . . , {'Wk,pjS) G (VF x cl((/7))*, > 1, such that 
Pi = Pk = py-ipiu)-: w = wi, V = Wk, the formula py.il){y) is a sub-sentence of each p,, in the 
sequence, and for all 1 < 'i < A;, we have {wi, pi) (w^i+i, Pi+i)- We say that {K, vr, ch) is well- 
founded if there is no least fixpoint sentence py.ijj{y) G c\{ip) and infinite sequence wi^W2, ■ ■ ■ such 
that, for each i > 1, py.ip{y) is regenerated from Wi to Wj+i. The proof of the following lemma 
is based on signatures, i.e., sequence of ordinals that guides the evaluation of least fixpoints. It is a 
minor variation of the one given for the original /x-calculus in IISE89II . Details are omitted. 

Lemma 3.2. Let ip be a sentence of the hybrid graded p-calculus. Then: 

(1) if ip is satisfiable, it has a well-founded adorned pre-model; 

(2) if {K, TT, ch) is a well-founded adorned pre-model ofp, then K is a model of p. 

We now establish the forest model property of the hybrid graded /x-calculus. 

Theorem 3.3. If a sentence ip of the hybrid graded p-calculus is satisfiable, then p has a directed 
quasi-forest model. 

Proof. Let p be satisfiable. By item (1) of Lemma [l!2l there is a well-founded adorned pre-model 
{K, TT, ch) for p. We unwind K into a directed quasi-forest structure K' = (1^', V , R'), and define 
a con^esponding mapping tt' : W — > at{p) and choice function ch' such that {K', tt', ch') is again 
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a well-founded adorned pre-model of Then, item (2) of Lemma yields that K' is actually a 
model of if. 

Let K = {W,L,R), and let wq € W such that ip G tt^wq). The set of states W of K' is 
a subset of IN"*" as required by the definition of (quasi) forest structures, and we define K' in a 
stepwise manner by proceeding inductively on the length of elements of W'. Simultaneously, we 
define vr', ch', and a mapping r : W —>■ W that keeps track of correspondences between states in 
K' and K. 

The base of the induction is as follows. Let / = {wi, . . . , W}^} C be a minimal subset such 
that wq e / and if o is a nominal in and L(o) = {w}, then w £ I. Define K' by setting: 
. W :={!,..., k}; 

• R'{a) := \ {wi,Wj) G R{a), 1 < i < j < k} for all a G Prog; 

• L'{p) := {i\wie L{p), 1 <i <k}for all p G Prop U Nom. 

Define r by setting T{i) = Wi for 1 < i < k. Then, tt'{w) is defined as it{t{w)) for all w G W, 
and ch' is defined by setting ch'(w, -01 V Tp2) = ch(r(u;), Tpi V -02) for all "01 V -02 G 7:'{w). Choices 
for atleast and allbut formulas are defined in the induction step. 

In the induction step, we iterate over all w G W of maximal length, and for each such w 
extend K', vr', ch', and r as follows. Let {{ai,ni)ipi,vi), . . . , ((om, nm)ip m 1 Vra ) be all pairs from 
cl((^) X W of this form such that for each {{ai,ni)xpi,Vi), we have {ai,ni)xpi G tt{w) and Vi G 
ch(r(u;), {ai,ni)ipi). For 1 < i < m, define 




3 ifvi = T{j),l<j<k 
w ■ i otherwise. 



To extend K', set 

. W' := W'U{a{vi),...,a{vm)}; 

• R'{a) := R'{a) U {{w, cr{vi)) \ Ui = a,l < i < m} for all a G Prog; 

• L'{p) := L'{p) i^{wi \vi£ L{p), 1 < i < m} for all p G Prop U Nom. 

Extend r and vr' by setting t{w ■ i) = Vi and vr'(u; • i) = iT{vi) for all • i G W. Finally, extend 
ch' by setting 

• ch'{w ■ 1,11)1 y 02) := ch(t;j, ^1 V 0'2) for allw-ie W and -01 V -02 S t:'{w ■ i); 

• ch'{w, (n, a)^) := {(7(t;) | v G ch(T(?i;), (n, a)'0)} for all (n, a)-0 G 7r'(t(;); 

• ch'(tt;, a]0) := {a{v) \ v G ch(T(w), [n, a]'0) fl {ui, . . . , Vm}} for all [n, a]ip G vr'(^i)). 

It is easily seen that K' is a directed quasi-forest structure. Since (/^, 7r,ch) is an adorned pre- 
model of ip, it is readily checked that {K' ,tt' ,cW) is an adorned pre-model of as well. If a 
sentence fiy.ip{y) is regenerated from x to y in {K', vr', ch'), then fiy.ip{y) is regenerated from t(x) 
to T{y) in (K, vr,ch). It follows that well-foundedness of (K, vr,ch) implies well-foundedness of 

{K',7t',cW). □ 

Note that the construction from this proof fails for the fully enriched /^t-calculus because the 
unwinding of K duplicates states, and thus also duplicates incoming edges to nominals. Together 
with inverse programs and graded modalities, this may result in {K', vr') not being a pre-model of ip. 

4. Enriched automata 

Nondeterministic automata on infinite trees are a variation of nondeterministic automata on 
finite and infinite words, see IITho90i for an introduction. Alternating automata, as first introduced 
in IIMS87II . are a generalization of nondeterministic automata. Intuitively, while a nondeterministic 
automaton that visits a node x of the input tree sends one copy of itself to each of the successors of 
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X, an alternating automaton can send several copies of itself to the same successor. In the two-way 
pai^adigm ||Var98ll . an automaton can send a copy of itself to the predecessor of x, too. In graded 
automata IIKSV02II . the automaton can send copies of itself to a number n of successors, without 
specifying which successors these exactly are. Our most general automata model is that of fully 
enriched automata, as introduced in the next subsection. These automata work on infinite forests, 
include all of the above features, and additionally have the ability to send a copy of themselves to 
the roots of the forest. 

4.1. Fully enriched automata. We start with some preliminaries. Let F C 1N+ be a forest, x a 
node in F, and c € N. As a convention, we take {x ■ c) ■ —I = x and c • — 1 as undefined. A path 
vr in F is a minimal set tt C F such that some root r of F is contained in vr and for every x € vr, 
either x is a leaf or there exists a c € F such that x • c € vr. Given an alphabet S, a T,-labeled forest 
is a pair (F, V), where F is a forest and V : F ^ maps each node of F to a letter in S. We call 
(F, V) a T,-labeled tree if F is a tree. 

For a given set Y, let B~^{Y) be the set of positive Boolean formulas over Y (i.e.. Boolean 
formulas built from elements in Y using A and V), where we also allow the formulas true and false 
and A has precedence over V. For a set X C y and a formula 9 G B'^{Y), we say that X satisfies 
9 iff assigning true to elements in X and assigning false to elements inY \ X makes 6 true. For 
6 > 0, let 

m) = m, {!),..., m 

[[b]] = {[0],[1],...,[6]} 

Db = ((6)) U [[6]] U {-!,£, (root), [root]} 
A fully enriched automaton is an automaton in which the transition function 6 maps a state q and 
a letter cj to a formula in B^{Di, x Q). Intuitively, an atom {{n),q) (resp. means that 

the automaton sends copies in state q to n + 1 (resp. all but n) different successors of the cuiTcnt 
node, {e, q) means that the automaton sends a copy in state q to the current node, (— 1, g) means that 
the automaton sends a copy in state q to the predecessor of the cun^ent node, and ((root), q) (resp. 
([root], g)) means that the automaton sends a copy in state q to some root (resp. all roots). When, 
for instance, the automaton is in state q, reads a node x, and 

6{q,Vix)) = (-l,gi) A (((root), V ([root], qs)), 

it sends a copy in state qi to the predecessor and either sends a copy in state q2 to some root or a 
copy in state q-^ to all roots. 

Formally, afully enriched automaton (FEA, for short) is a tuple A = (S, b, Q, 6, qo, J^), where 
S is a finite input alphabet, 6 > is a counting bound, Q is a finite set of states, (5 : Q x S ^ 
B~^{Db X Q) is a transition function, go € Q is an initial state, and T is an acceptance condition. A 
run of A on an input S-labeled forest (F, V) is an F x Q-labe\ed tree {Tr,r). Intuitively, a node in 
Tr labeled by (x, q) describes a copy of the automaton in state q that reads the node x of F. Runs 
start in the initial state at a root and satisfy the transition relation. Thus, a run {Tr, r) has to satisfy 
the following conditions: 

(i) r{Toot{Tr)) = (c, go) for some root c of F and 

(ii) for all y ^ Tr with r{y) = (x, q) and 6{q, V{x)) = 6, there is a (possibly empty) set 5 C 
Db X Q such that S satisfies 9 and for all (d, s) € S, the following hold: 

— If d e {— 1, e}, then x ■ dis defined and there is j e IN such that y ■ j ^ Tr and r{y ■ j) = 
(x • d, s); 

— If d = (n), then there is a set M C succ(x) of cardinality n + 1 such that for all z € M, 
there is j G IN such that y ■ j ^ T^and r(y • j) = {z, s); 
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— If d = [n], then there is a set M C succ(a;) of cardinality n such that for all z G succ(x) \ 
M, there is j G IN such that y ■ j ^ Tr and r{y ■ j) = {z, s); 

— If d = (root), then for some root c ^ F and some j S IN such that y ■ j ^ Tr, it holds that 

r{y-j) = (c,s); 

— If d = [root], then for each root c ^ F there exists j G IN such that y ■ j ^ Tr and 
r{y-j) = (c,s). 

Note that if ^? = true, then y does not need to have successors. Moreover, since no set S satisfies 
9 = false, there cannot be any run that takes a transition with 9 = false. 

A run {Tr, r) is accepting if all its infinite paths satisfy the acceptance condition. We consider 
here the parity acceptance condition liMos841 |EJ9 1 1 ITho97l . where T = {!Fi,J^2, • • • , -^^fc} is such 
that T\ ^ T2 ■ ■ ■ = Q- The number k of sets in T is called the index of the automaton. 

Given a run {Tr,r) and an infinite path vr C Tr, let lnf(7r) C Q be the set of states q such that 
r{y) G F X {q\ for infinitely many y ir. A path vr satisfies a parity acceptance condition 
JF = {Ti,T2, ■ ■ ■ ,^k} if the minimal i with lnf(7r) n 7^ is even. An automaton accepts a 
forest iff there exists an accepting run of the automaton on the forest. We denote by C{A) the set of 
all S-labeled forests that A accepts. The emptiness problem for FEAs is to decide, given a FEA A, 
whether C{A) = 0. 

4.2. Two-way graded alternating parity tree automata. A two-way graded alternating parity 
tree automaton (2GAPT) is a FEA that accepts ti'ees (instead of forests) and cannot jump to the root 
of the input tree, i.e., it does not support transitions (root) and [root]. The emptiness problem for 
2GAPTs is thus a special case of the emptiness problem for FEAs. In the following, we give a 
reduction of the emptiness problem for FEAs to the emptiness problem for 2GAPTs. This allows 
us to derive an upper bound for the former problem from the upper bound for the latter that is 
established in Section |6] 

We show how to translate a FEA A into a 2GAPT A' such that C{A') consists of the forests 
accepted by A, encoded as trees. The encoding that we use is straightforward: the tree encoding of 
a S-labeled forest {F, V) is the S l+l {root}-labeled tree (T, V) obtained from (F, V) by adding a 
fresh root labeled with {root} whose children are the roots of F. 

Lemma 4.1. Let A be a FEA running on T,-labeled forests with n states, index k and counting 
bound b. There exists a 2GAPT A' that 

(1) accepts exactly the tree encodings of forests accepted by A and 

(2) has 0{n) states, index k, and counting bound b. 
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Proof. Suppose A = (S, h, Q, 5, qo,J^). Define A' as (S tt) {root}, b, Q', 5', q'q, T'), wliere Q' and 
6' are defined as follows: 



Q' 


= Q^{qo,qr}^{someq,a\\q\q 


S'iq'o, root) 


= ((0),(?o)A([0],(?,) 




= false for all a ^ {root} 


S'{qr, root) 


= false 


6'{qr,a) 


= ([0],g,.) for all 0- / {root} 


(5'(someq, a) 


J (— l,someq) if cr / root 
1 {{0),q) otherwise 


5'(allg,a) 


f (-l,allg) if cr 7^ root 
1 ( [0] , q) otherwise 


5'((?,ct) 


= tran(5(g, cr)) for all g G Q and 



Here, tran(/3) replaces all atoms ((root), g) in j3 with {e, someg), and all atoms ([root], g) in /3 with 
(e, allg). The acceptance condition JT' is identical to ^ = {Ti, . . . ,J^k}, except that all are 
extended with g,. and is extended with qo and all states someg and all^. It is not hai^d to see that 
A' accepts (T, V) iff A accepts the forest encoded by (T, V). □ 

In Section [6l we shall prove the following result. 

Theorem 4.2. The emptiness problem for a 2GAPT A = (S, 6, Q, 5, qo,^) with n states and index 
k can be solved in time {b + 2)^("'-'=' i°g'=-i°g^'). 

By Lemma l4~n we obtain the following corollary. 

Corollary 4.3. The emptiness problem for a FEA A = (S, b, Q, 6, qo^J-) with n states and index k 
can be solved in time {b + 2)C('^' '='-i°g'= i°g'''). 



5. EXPTIME upper bounds for enriched /^i-CALCULI 

We use Theorem 14.21 and Corollary 14. 3 1 to establish ExpTlME upper bounds for satisfiability in 
the full graded /u-calculus and the hybrid graded /x-calculus. 

5.1. Full graded ^Li-calculus. We give a polynomial translation of formulas ip of the full graded ^i- 
calculus into a 2GAPT A^ that accepts the tree models of ip. We can thus decide satisfiability of ip 
by checking non-emptiness of C{Aip). There is a minor technical difficulty to be overcome: we use 
Kripke structures with labeled edges, while the trees accepted by 2GAPTs do not. This problem can 
be dealt with by moving the label from each edge to the target node of the edge. For this purpose, we 
introduce a new propositional symbol pa for each program a. For a formula ip, let T{ip) denote the 
set of all atomic propositions and all propositions pa such that a is an (atomic or inverse) program 
occurring in (p. The encoding of a tree structure K = {W, R, L) is the 2'"^''') -labeled tree (W, L*) 
such that 

L*{w) = {p G Prop I w G L{p)} U {pa \ ^{v, w) G R{a) with w a-successor of v in W}. 

For a sentence p, we use \p\ to denote the length of p with numbers inside graded modalities 
coded in binary. Formally, \p\is defined by induction on the structure of (/? in a standard way, where 
in particular | (n, a)'0| = | [n, alipl = [log n] + 1 + |^/;|. We say that a formula p counts up to b if 
the maximal integer in atleast and allbut formulas used in is 6 — 1. 
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Theorem 5.1. Given a sentence ip of the full graded fi-calculus that counts up to b, we can construct 
a 2GAPT A^p such that 

(1) accepts exactly the encodings of tree models of ip, 

(2) has states, index 0(\'~p\), and counting hound b. 
The construction can be done in time 0{\(p\). 

Proof. The automaton A^p verifies tliat ip iiolds at tiie root of tlie encoded tree. To define the set 
of states, we use the Fischer-Ladner closure c\{lp) of ip. It is defined analogously to the Fischer- 
Ladner closure cl(-) for the hybrid graded ^u-calculus, as given in Section |3] We define A^p as 
(2'"('^\ 6, cl((^), 99, T), where the transition function 5 is defined by setting, for all a G 2'"^'^), 

5{p,a) = {peer) 

'5(^P,cr) = (p0cr) 

(5(V'i A ^^2,0-) = (e,Vi) A (e,V'2) 

<5(V'i VV'2,ct) = (e,Vi) V(e,V'2) 

5{\y.i^{y),a) = {e,ip{Xy.'il^{y))) 

6{{n,a)tl;,a) = ((-1, V') A (e,p„-) A ((n - 1), V Ap^)) V ((n), V Ap^) 

6{{n,a~)tl;,a) = ((-1, V') A (e,pa) A ((n - 1), V Ap„-)) V ((n), V Ap„-) 

6{[n,a]tl;,a) = {{-1,^) A {e,Pa-) A {[n],^ A Pa)) V {[n - 1],^ A pa) 

6{[n,a-]tl;,a) = {{-1,^) A {e,Pa) A {[n],ib A p^-)) V {[n - 1],^ A p^-) 

In case n = 0, the conjuncts (resp. disjuncts) involving "n — 1" are simply dropped in the last two 
Unes. 

The acceptance condition of A^ is defined in the standard way as follows (see e.g. MKVWOOII ). 
For a fixpoint formula ip G cl((/9), the alternation level of tp is the number of alternating fixpoint 
formulas one has to "wrap ip with" to reach a sub-sentence of ip. Formally, let tp = Xy.ip'{y). The 
alternation level of ip in tp, denoted al^('i/') is defined as follows ( IIBC96II ): if i/; is a sentence, then 
a\^p{'p) = 1. Otherwise, let ^ = X'z.ip"{z) be the innermost /i or i/ subformula of (p that has ip as 
a strict subformula. Then, if z is free in tp and A' / A, we have a\ip{ip) = al,^(^) + 1; otherwise, 
al^itp) = al<^(0- 

Let d be the maximum alternation level of (fixpoint) subformulas of (p. Denote by Gi the set 
of all i^-formulas in c\{ip) of alternation level i and by Bi the set of all //-formulas in c\{ip) of 
alternation level less than or equal to i. Now, define := {To,J^i, . . . , T2d, Q} with = and 
for every 1 < i < d, T2i~\ = ^2i~2 U Bi and = -^2^-1 U Gi. Let vr be a path. By definition of 
J^, the minimal i with Inf (vr) n Fj 7^ determines the alternation level and type A of the outermost 
fixpoint formula Xy.tp{y) that was visited infinitely often on vr. The acceptance condition makes 
sure that this formula is a i/-formula. In other words, every /x-formula that is visited infinitely often 
on vr has a super-formula that (i) is a ;/-formula and (ii) is also visited infinitely often. □ 

Let (/? be a sentence of the full graded //-calculus with i at-least subformulas. By Theorems 13. 11 
|4.2[ and 15. 1[ the satisfiability of (f can be checked in time bounded by 2^(1*^1) where /^d^?]) is a 
polynomial (note that, in Theorem 14.21 n, k, log£, and log 6 are all in ^^^([(/jI)). This yields the 
desired ExpTlME upper bound. The lower bound is due to the fact that the /i-calculus is EXPTIME- 
hard IfTTTQI . 

Theorem 5.2. The satisfiability problem of the full graded ^-calculus is ExPTlME-complete even if 
the numbers in the graded modalities are coded in binary. 
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5.2. Hybrid graded /x-calculus. We reduce satisfiability in tiie iiybrid graded /i-calculus to the 
emptiness problem of FEAs. Compai^ed to the reduction presented in the previous section, two 
additional difficulties have to be addressed. 

First, FEAs accept forests while the hybrid /i-calculus has only a ^Ma^Z-forest model property. 
This problem can be solved by introducing in node labels new propositional symbols which 
do not occur in the input formula and represent an edge labeled with the atomic program a from 
the current node to the (unique) root node labeled by nominal o. Let &{ip) denote the set of all 
atomic propositions and nominals occurring in ip and all propositions pa and such that the atomic 
program a and the nominal o occur in ip. Analogously to encodings of trees in the previous section, 
the encoding of a directed quasi-forest structure K = (W, R, L) is the 2® ("^^ -labeled forest (W, L*) 
such that 

L*{w) = {p e Prop U Norn | w € L(p)} U 

{pa I 3(v, w) G R{a) with w successor of v in W} U 
{Z\ 3{w,v) e R{a) with L(o) = {v}}. 
Second, we have to take care of the interaction between graded modalities and the implicit 
edges encoded via propositions j^. To this end, we fix some information about the structures ac- 
cepted by FEAs akeady before constructing the FEA, namely (i) the formulas from the Fischer- 
Ladner closure that are satisfied by each nominal and (ii) the nominals that are interpreted as the 
same state. This information is provided by a so-called guess. To introduce guesses formally, we 
need to extend the Fischer-Ladner closure c\{ip) for a formula ip of the hybrid graded /x-calculus 
as follows: c\{ip) has to satisfy the closure conditions given for the hybrid graded /i-calculus in 
Section [3] and, additionally, the following: 

• if Tp £ cl((^), then ^ip G c\{ip), where -^ip denotes the formula obtained from ip by dualizing all 
operators and replacing every literal (i.e., atomic proposition, nominal, or negation thereof) with 
its negation. 

Let if he a. formula with nominals O = {oi, . . . , Ok}- A guess for ipis a. pair (t, ~) where t assigns 
a subset t{o) C cl((/?) to each o G O and '-^ is an equivalence relation on O such that the following 
conditions are satisfied, for all o, o' G O: 

(i) ip G t{o) or -1^ G t{o) for all formulas tp G cl((/?); 

(ii) o G t(o); 

(iii) o ^ o' implies i(6) = t{o'); 

(iv) o ^ o' implies ->o G t{o'). 

The intuition of a guess is best understood by considering the following notion of compatibility. 
A directed quasi-forest structure K = {W, R, L) is compatible with a guess G = {t, ~) if the 
following conditions are satisfied, for all o,o' G O: 

• L{o) = {w] implies that {ip G c\{ip) \ K,w \= tp} = t{o); 

• L{o) = L{o') iff o ^ a'. 

We construct a separate FEA A^p^c for each guess G for ip such that ip is satisfiable iff >C(j4^ g) is 
non-empty for some guess G. Since the number of guesses is exponential in the length of (p, we get 
an ExpTime decision procedure by constructing all of the FEAs and checking whether at least one 
of them accepts a non-empty language. 

Theorem 5.3. Given a sentence ip of the hybrid graded ^-calculus that counts up to b and a guess 
Gfor p, we can construct a FEA A^p^c such that 

(1) if {F, V) is the encoding of a directed quasi-forest model ofp> compatible with G, then {F, V) G 
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(2) if C{A^^g) 7^ 0> then there is an encoding {F, V) of a directed quasi-forest model of if compat- 
ible with G such that {F, V) € C{A^^g)' '^^d 

(3) A^p^G has Od^jp) states, index 0{\ip\), and counting bound b. 
The construction can be done in time 0{\ip\'^). 

Proof. Let 93 be a formula of the hybrid graded /^t-calculus and G = {t, ~) a guess for ip. Assume 
that the nominals occuning in ip aie O = {oi, . . . , Ofc}. For each formula ip G cl((^), atomic 
program a, and a G 2®*^'''^ let 

• nom;(a) = {o I ^ G t{o) A To e 

• jnom^((T)j~ denote the number of equivalence classes C of such that some member of G is 
contained in nom^((T). 

The automaton A^^g verifies compatibility with G, and ensures that holds in some root. As its set 
of states, we use 

Q = c\{ip) U {qo} U {^Oi y-il^, \ l<i<kA'ip e c\{(p)} U {inii \1 <i <k}. 

Set A^p^G = {2^^'^\b, Q, 6, qo,!F), where the transition function 6 and the acceptance condition 
is defined in the following. For all a G 2®^'''^ define: 

^(^0,0") = ((root),(^) A /\ ((root),Oi)A f\ ([root], inij) 

l<i<fc l<i<A: 

6{\n\i,a) = {e,^0i) V f\ {e,j) 

7&ioi) 

S{tpi A ^2, 0-) = {e, ^1) A (e, V2) 
<5(V'i V^2,ct) = (e,V'i)V(e,V'2) 
6{Xy.ip{y),a) = {e,^lj{Xy.'ip{y))) 
S{[n, a]V', cr) = false if |nom^^^((7)|~ > n 

6{[n,a]i;,a) = ([n - |nom^^(a)|^], A A /\ ([root], V V') if |nom^^(cT)r < n 

oGnom J (cr) 

(5((?i,a)^,o-) = ((n- |nom;5X^)r)'V'Apa) A /\ ([root], V ^) 

oSnom"^ (cr) 

In the last line, the first conjunct is omitted if |nom^(cr)|~ > n. The first two transition rules check 
that each nominal occurs in at least one root and that the encoded quasi-forest structure is compatible 
with the guess G. Consider the last three rules, which are concerned with graded modalities and 
reflect the existence of implicit back-edges to nominals. The first of these rules checks for allbut 
formulas that are violated purely by back-edges. The other two rules consist of two conjuncts, each. 
In the first conjunct, we subtract the number of nominals to which there is an implicit a-edge and 
that violate the formula in question. This is necessary because the (•) and [•] transitions of the 
automaton do not take into account implicit edges. In the second conjunct, we send a copy of the 
automaton to each nominal to which there is an a-edge and that satisfies tp. Observe that satisfaction 
of ip at this nominal is already guaranteed by the second rule that checks compatibility with G. We 
nevertheless need the second conjunct in the last two rules because, without the jump to the nominal, 
we will be missing paths in runs of A^^g (those that involve an implicit back-edge). Thus, it would 
not be guaranteed that these paths satisfy the acceptance condition, which is defined below. This, in 
turn, means that the evaluation of least fixpoint formulas is not guaranteed to be well-founded. This 
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point was missed in MSVOll . and the same strategy used here can be employed to fix the construction 
in that paper. 

The acceptance condition of A^^^g is defined as in the case of the full graded /i-calculus: let 
d be the maximal alternation level of subformulas of if, which is defined as in the case of the 
full graded /i-calculus. Denote by Gi the set of all the z^-formulas in c\{ip) of alternation level 
i and by Bi the set of all /x-formulas in c\{ip) of alternation depth less than or equal to i. Now, 
JF = {Tf),J^i, . . . , T2d, Q}, where J^o = and for every 1 < i < d we have T2i-i = ^2i-2 U Bi, 
and J^2i = ^2i-i U Gi. 

It is standard to show that if {F, V) is the encoding of a directed quasi-forest model K of ip 
compatible with G, then {F,V) £ £(^<^,g)- Conversely, let {F,V) £ C{A^^g)- If {F,V) is 
nominal unique, i.e., if every nominal occurs only in the label of a single root, it is not hard to show 
that {F, V) is the encoding of a directed quasi-forest model K of Lp compatible with G. However, 
the automaton ^<^,g does not (and cannot) guarantee nominal uniqueness. To establish Point (2) of 
the theorem, we thus have to show that whenever g) ^ 0, then there is an element of C{A^p^g) 
that is nominal unique. 

Let {F, V) € C{A^p^g)- From {F, V), we extract a new forest {F' , V') as follows: Let r be a 
run of A^^G on (-^> Remove all trees from F except those that occur in r as witnesses for the 
existential root transitions in the first transition rule. Call the modified forest F' . Now modify r into 
a run r' on F': simply drop all subtrees rooted at nodes whose label refers to one of the trees that 
are present in F but not in F' . Now, r' is a run on F' because (i) the only existential root transitions 
are in the first rule, and these are preserved by construction of F' and r'; and (ii) all universal root 
transitions are cleai^ly preserved as well. Also, r' is accepting because every path in r' is a path in r. 
Thus, (F', V') € C{Aip^G) and it is easy to see that (F', V') is nominal unique. □ 

Combining Theorems 13.31 Corollary 14.31 and Theorem 15. 3[ we obtain an ExpTlME-upper 
bound for the hybrid graded //-calculus. Again, the lower bound is from IIFL79II . 

Theorem 5.4. The satisfiability problems of the fiill graded ^-calculus and the hybrid graded /i- 
calculus are EXPTlME-complete even if the numbers in the graded modalities are coded in binary. 

6. The Emptiness Problem for 2GAPTs 

We prove Theorem 14.21 and thus show that the emptiness problem of 2GAPTs can be solved in 
ExpTime. The proof is by a reduction to the emptiness problem of graded nondeterministic parity 
tree automata (GNPTs) as introduced in ||KSV02i 

6.1. Graded nondeterministic parity tree automata. We introduce the graded nondeterministic 
parity tree automata (GNPTs) of IIKSV02i For 6 > 0, a b-bound is a pair in 

Bb = {(>, 0), (<, 0), (>, 1), (<, 1), . . . , (>, b), (<, b)}. 

For a set X, a subset P of X, and a (finite or infinite) word t = xiX2 • • • € X* U X^, the weight 
of P in t, denoted weight (P, t), is the number of occurrences of symbols in t that are members of 
P. That is, weight(P,t) = |{i : Xi £ P}\. For example, weight({l, 2}, 1241) = 3. We say that 
t satisfies a 6-bound (>, n) with respect to P if weight(i-*, t) > n, and t satisfies a 6-bound (<, n) 
with respect to P if weight (P, t) < n. 

For a set Y, we use B{Y) to denote the set of all Boolean formulas over atoms in Y. Each 
formula 9 € B{Y) induces a set sat(6') C 2^ such that x € sat(^) iff x satisfies 9. For an 
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integer b > 0, a. b-counting constraint for 2 is a relation C C B{Y) x Bi,. For example, if 
y = {2/1,2/2,2/3}, then we can have 

C = {(2/1 V -y2, (<, 3)), (ys, (<, 2)), (2/1 A 2/3, (>, l))}- 

A word t = xiX2 • • • G (2^)* U (2^)'^ satisfies the 5-counting constraint C if for all {9,^) G C, 
the word t satisfies ^ with respect to sat{9), that is, when 9 is paired with ^ = (>,n), at least 
n + 1 occurrences of symbols in t should satisfy 9, and when 9 is paired with ^ = (<,n), at 
most n occurrences satisfy 9. For example, the word ti = 0{2/i}{2/2}{2/i, 2/3} does not satisfy the 
constraint C above, as the number of sets in ti that satisfies yi A 1/3 is one. On the other hand, the 
word t2 = {2/2} {2/1} {2/1, 2/2, 2/3}{2/i, 2/3} satisfies C. Indeed, three sets in t2 satisfy yi V -1^2, two 
sets satisfy 7/3, and two sets satisfy 2/1 A ^3. 

We use C{Y,b) to denote the set of all 6-counting constraints for 2^. We assume that the 
integers in constraints are coded in binary. 

We can now define graded nondetemiinistic parity tree automata (GNPTs, for short). A GNPT 
is a tuple A = (S, b, Q, 6, qQ,T) where S, b, qo, and are as in 2GAPT, Q C 2^ is the set of 
states (i.e., Q is encoded by a finite set of variables), and 6 : Q x —>■ C{Y, b) maps a state and a 
letter to a 6-counting constraint C for 2^ such that the cardinality of C is bounded by log \Q\. For 
defining runs, we introduce an additional notion. Let x be a node in a S-labeled tree (T, V), and let 
X ■ ii,x ■ 12, ■ ■ ■ be the (finitely or infinitely many) successors of x in T, where ij < ij+i (the actual 
ordering is not important, but has to be fixed). Then we use lab(x) to denote the (finite or infinite) 
word of labels induced by the successors, i.e., lab(x) = V{x ■ ii)V{x ■ 12) ■ ■ ■ ■ Given a GNPT A, a 
run of ^ on a S-labeled tree (T, V) rooted in z is then a Q-labeled tree (T, r) such that 

• r{z) = Qo and 

• for every x £ T, \ab{x) satisfies 6{r{x), V{x)). 

Observe that, in contrast to the case of alternating automata, the input tree (T, V) and the run 
(r, r) share the component T. The run {T, r) is accepting if all its infinite paths satisfy the parity 
acceptance condition. A GNPT accepts a tree iff there exists an accepting run of the automaton on 
the tree. We denote by C{A) the set of all S-labeled trees that A accepts. 

We need two special cases of GNPT: FORALL automata and Safety automata. In For all 
automata, for each q £ Q and o" G S there is a G Q such that S{q,a) = {{{~'9q'), (<,0))}, 
where 9q' G B{Y) is such that sat{9qi) = {{q'}}- Thus, a FORALL automaton is very similar to 
a (non-graded) deterministic parity tree automaton, where the transition function maps q and a to 
{q', . . . , q') (and the out-degree of trees is not fixed). In Safety automata, there is no acceptance 
condition, and all runs ai^e accepting. Note that this does not mean that Safety automata accept all 
trees, as it may be that on some trees the automaton does not have a run at all. 

We need two simple results concerning GNPTs. The following has been stated (but not proved) 
already in IIKSV02L 

Lemma 6.1. Given a FORALL GNPT Ai with ni states and index ki, and a Safety GNPT A2 
with 77-2 states and counting bound 62. we can define a GNPT A with nin2 states, index ki, and 
counting bound 62. such that C{A) = C{Ai) n C{A2). 

Proof. We can use a simple product construction. Let Ai = {T,,bi,Qi, Si,qo^i, T^^^) with Qi C 2^» 
for i G {1,2}. Assume w.l.o.g. that YinY2 = 0. We define A = {J:,b2,Q,d, (go,i U 90,2),-^), 
where 

• Q = {gi U g2 I gi G Qi and q2 G Q2} C 2^, where F = tt) Y2; 

• for all cr G S and q = qiliq2 £ Q with 5i{qi,a) = {{{^9q), (<, 0))} and (52(^2, c) = C, we set 
5{q,a) = CU{{{^9'g),{<,0))}, where 9'g G 5(y) is such that sat(0;) = {q' e Q \ q'nQi = q}; 
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• T={Ti,...,Tk} with = {g G Q I g n Qi G ^('^ } if = {^f ^ , . . . , -^r^ }. 

It is not hard to check that A is as required. □ 

The following result can be proved by an analogous product construction. 

Lemma 6.2. Given Safety GNPTs Ai with rii states and counting bounds hi, i G {1,2}, we 
can define a Safety GNPT A with nin2 states and counting bound b = max{6i, ^2} such that 
CiA) = CiAi) n C{A2). 

6.2. Reduction to Emptiness of GNPTs. We now show that the emptiness problem of 2GAPTs 
can be reduced to the emptiness problem of GNPTs that are only exponentially larger. Let A = 
(S, b, Q, 6, qo,J^) be a 2GAPT. We recall that 5 is a function from Q x S to B+{D^ x Q), with 

D~ := {{b)) U [[b]] U {-1, e}. A strategy tree for A is a 2^^^^^ ^*34abeled tree (T, str). Intuitively, 
the purpose of a strategy tree is to guide the automaton A by pre-choosing transitions that satisfy 
the transition relation. For each label w = str(x), we use head(tt;) = {q \ {q, c, q') G w} to denote 
the set of states for which str chooses transitions at x. Intuitively, if A is in state q G head(w), str 
tells it to execute the transitions {(c, q') \ (g, c, q') G w}. In the following, we usually consider only 
the str part of a strategy tree. Let (T, V) be a S-labeled tree and (T, str) a strategy tree for A, based 
on the same T. Then str is a strategy for Aon V if for all nodes x G T and all states q £ Q, we 
have: 

(1) d{qo,V{root{T))) = true or go e head(str(root(r))); 

(2) if g G head(str(x)), then the set {(c, q') : {q, c, q') G str(x)} satisfies 5{q, V{x)), 

(3) if (g, c, g') G str(x) with c G {—1, e}, then (i) x • c is defined and (ii) 5{q' , V{x ■ c)) = true or 
q' G head(str(x • c)). 

If A is understood, we simply speak of a strategy on V. 

Example 6.3. Let A = {T.,b,Q,6,qo,T) be a 2GAPT such that S = {a,b,c}, Q = {qo,qi, 
q2, 53}, and 5 is such that 5{q, a) = ((0), gi) V ((0), 93) for q G {qo, ^2}, and S{qi,b) = ((-1, 92) A 
((1), ^3)) V ([1], qi). Consider the trees depicted in Figure|2] From left to right, the first tree (T, V) 
is a fragment of the input tree, the second tree is a fragment of a run (T^, r) of A on (T, V), and the 
third tree is a fragment of a strategy tree suggesting this run. In a label {w, a) of the input tree, w is 
the node name and a G S the label in the tree. In the run and strategy tree, only the labels are given, 
but not the node names. 

Strategy trees do not give full information on how to handle transitions ((n),g) and ([n],q) 
as they do not say which successors should be used when executing them. This is compensated 
by promise trees. A promise tree for A is a 2'^^'5-labeled tree (T, pro). Intuitively, if a run that 
proceeds according to pro visits a node x in state q and chooses a move {{n),q') or {[n\,q'), then 
the successors x • i of x that inherit q' are those with {q, q') G pro(x • i). Let (T, V) be a S-labeled 
tree, str a strategy on V, and (T, pro) a promise tree. We call pro a promise for A on str if the states 
promised to be visited by pro satisfy the transitions chosen by str, i.e., for every node x G T, the 
following hold: 

(1) for every (g, (n), q') G str(x), there is a subset M C succ(x) of cardinality n + 1 such that each 
y e M satisfies {q, q') G pro(?/); 

(2) for every ((7, G str(x), there is a subset M C succ(x) of cardinality n such that each 
y G succ(x) \ M satisfies {q, q') G pro(y); 

(3) if (g, q') G pro(x), then 6{q', V{x)) = true or q' G head(str(x)). 
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Figure 2: A fragment of an input tree, a corresponding run, and its strategy tree. 

Consider a E-labeled tree (T, V), a strategy str on V, and a promise pro on str. An infinite 
sequence of pairs {xq, qq), {xi, gi) ... is a trace induced by str and pro if xq is the root of T, qq is 
the initial state of A and, for each i > 0, one of the following holds: 

• there is [qi, c, qi+i) € str{xi) with c = —1 or c = e, Xi ■ c defined, and Xj+i = Xi ■ c; 

• str(xj) contains [qi, (n), qj+i) or {qi, [n], q^j+i), there exists j S IN with Xj+i = Xi ■ j G T, and 
{qi,qi+i) G pro(xj+i). 

Let T = {Ti , . . . For each state q G Q, let index(g) be the minimal i such that q £ Ti. For a 

trace vr, let index(7r) be the minimal index of states that occur infinitely often in vr. Then, tt satisfies 
T if it has even index. The strategy str and promise pro are accepting if all the traces induced by 
str and pro satisfy T. 

In IIKSV02II . it was shown that a necessary and sufficient condition for a tree (T, y) to be 
accepted by a one-way GAPT is the existence of a strategy str on V and a promise pro on str that 
are accepting. We establish the same result for the case of 2GAPTs. 

Lemma 6.4. A 2GAPT A accepts (T, V) iff there exist a strategy str for AonV and a promise pro 
for A on str that are accepting. 

Proof Let A = (S, h, Q, 6, qo,T) be a 2GAPT with = {J^i, . . . , Tk}, and let (T, V") be the input 
tree. Suppose first that A accepts (T, V). Consider a two-player game on S-labeled trees. Protago- 
nist vs. Antagonist, such that Protagonist is trying to show that A accepts the tree, and Antagonist 
is challenging that. A configuration of the game is a pair in T x Q. The initial configuration 
is ( root (r), go)- Consider a configuration {x,q). Protagonist is first to move and chooses a set 
-Pi = {(ci,gi), . . . , {cm,qm)} C X Q that satisfies 6{q,V{x)). If 5{q,V{x)) = false, then 
Antagonist wins immediately. If Pi is empty. Protagonist wins immediately. Antagonist responds 
by choosing an element {ci,qi) of Pi. If q G {— l,e}, then the new configuration is {x ■ Ci,qi). 
If X • Cj is undefined, then Antagonist wins immediately. If q = , Protagonist chooses a subset 
M C succ(a;) of cardinality n + 1, Antagonist wins immediately if there is no such subset and oth- 
erwise responds by choosing an element y of M. Then, the new configuration is {y,qi). If Cj = [n], 
Protagonist chooses a subset M C succ(a;) of cardinality at most n, Antagonist wins immediately if 
there is no such subset and otherwise responds by choosing an element y of succ(x)\M. Protagonist 
wins immediately if there is no such element. Otherwise, the new configuration is {y,qi). 

Consider now an infinite game Y, that is, an infinite sequence of immediately successive game 
configurations. Let Inf (y) be the set of states in Q that occur infinitely many times in Y. Protagonist 
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wins if there is an even i > for which Inf(F) n 7^ and Inf(y) Ci = for all j < i. 
It is not difficult to see that a winning strategy of Protagonist against Antagonist is essentially a 
representation of a run of A on (T, V) and vice versa. Thus, such a winning strategy exists iff A 
accepts this tree. The described game meets the conditions in ||Jut95l| . It follows that if Protagonist 
has a winning strategy, then it has a memoryless strategy, i.e., a strategy whose moves do not depend 
on the history of the game, but only on the cunent configuration. 

Since we assume that A accepts the input tree (T, V), Protagonist has a memoryless winning 
strategy on {T, V). This winning strategy can be used to build a strategy str on V and a promise pro 
on str in the following way. For each x € T, str(x) and pro(x) are the smallest sets such that, for 
all configurations (rc, q) occumng in Protagonist's winning strategy, if Protagonist chooses a subset 
Pi = {(ci, gi), . . . , (cm, Qm)} of X Q in the winning strategy, then we have 

(i) {q} X Pi C str{x) and 

(ii) for each atom {ci,qi) of Pi with q = (n) (resp. q = [n]) if M = {yi, . . . , i/n+i} (resp. M = 
{yi, . . . , yn}) is the set of successors chosen by Protagonist after Antagonist has chosen {ci,qi), 
then we have {q, qi) € pro(y) for each y G M (resp. for each y € succ(2;) \ M). 

Using the definition of games and the consti'uction of str, it is not hard to show that str is indeed a 
strategy on V. Similarly, it is easy to prove that pro is a promise on str. Finally, it follows from the 
definition of wins of Protagonist that str and pro are accepting. 

Assume now that there exist a strategy str on V and a promise pro on str that are accepting. 
Using str and pro, it is straightforward to inductively build an accepting run (T^, r) of A on (T, V): 

• start with introducing the root z of T^, and set r{z) = (root(T), qo); 

• if y is a leaf in with r{y) = {x,q) and 5{q, V{x)) ^ true, then do the following for all 
(g,c,g') G str(a;): 

— If c = — 1 or c = e, then add a fresh successor y • j to y in and set r(y • j) = (x • c, g'); 

— If c = (n) or c = [n], then for each j € IN with (g, g') G pro(x • j), add a fresh successor y • j' 
to y in Tj. and set r(y • j') = {x ■ j, q'). 

By Condition (3) of strategy trees, y • j is defined in the induction step. Using the properties of 
strategies on V and of promises on str, it is straightforward to show that {Tr,r) is a run. It thus 
remains to prove that {Tr,r) is accepting. Let vr be a path in (T,., r). By definition of traces induced 
by str and pro, the labeling of vr is a trace induced by str and pro. Since str and pro ai^e accepting, 
so is vr. □ 

Strategy and promise trees together serve as a witness for acceptance of an input tree by a 
2GAPT that, in contrast to a run {Tr, r), has the same tree structure as the input tree. To translate 
2GAPTs into GNPTs, we still face the problem that traces in strategies and promises can move both 
up and down. To restrict attention to unidirectional paths, we extend to our setting the notion of 
annotation as defined in IIVar98i . Annotations allow decomposing a trace of a strategy and a promise 
into a downward part and several finite parts that are detours, i.e., divert from the downward trace 
and come back to the point of diversion. 

Let A = (S, b, Q, 6, qo,T) be a 2GAPT. An annotation tree for A is a 2'3^{i' -'^}>'Q-labeled 
tree (T, ann). Intuitively, {q,i,q') G ann(x) means that from node x and state q, A can make a 
detour and comes back to x with state q' such that i is the smallest index of all states that have been 
seen along the detour. Let (T, V) be a S-labeled tree, str a strategy on V, pro a promise on str, and 
(T, ann) an annotation tree. We call ann an annotation for A on str and pro if for every node x G T, 
the following conditions ai^e satisfied: 
(1) If {q,e,q') G str(x) then {q,\ndex{q'),q') G ann(x); 
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(2) if {q,j',q') e ann(x) and {q',j",q") € ann(x),then {q,m\n{j' ,j"),q") G ann(x); 

(3) if (i) X = y • i, (ii) {q, -l,q') G str(x), (iii) {q',j,q") G ann(y) or = i?" with index(g') = 
j, (iv) iq",{n),q"') G str(?/) or (g", [n], q'"') G str(y), and (v) {q",q"') G pro(x), then 
{q,m\n{\ndex{q'),j,\ndex{q"')),q"') G ann(x); 

(4) if (i) y = X • z, (ii) {q,{n),q') G str(x) or (g, [n],g') G str(j;), (iii) {q,q') G pro(y), 
(iv) {q',j,q") G ann(y) or q' = q" with index(g') = j, and (v) ((7",— G str{y), 
then (q', min(index((7'), j, index((7"')), gr'") G ann(x). 

Example 6.5. Reconsider the 2GAPT A = {T,,h,Q,5,qQ,T) from Example 16.31 as well as the 
fragments of the input tree (T, V) and the strategy str on (T, V) depicted in Figure |2] Assume 
that there is a promise pro on str with (go, qi) S prolU) telling the automaton that if it executes 
((0),gi) in state go at node 1, it should send a copy in state qi to node 11. Using str(l) and 
Condition (4) of annotations, we can now deduce that, in any annotation ann on str and pro, we 
have (go, j, 52) S ann(l) with j the minimum of the indexes of go, qi, and g2. 

Given an annotation tree (T, ann) on str and pro, a downward trace vr induced by str, pro, and 
ann is a sequence (xo, go, to), {xi, gi, ti), . . . of triples, where xq = root(T), go is the initial state 
of A, and for each i > 0, one of the following holds: 

(t) ti is (gj, c, gj+i) G str(xj) for some c G [\b\] U [(6)], (g^, gj+i) G pro(xi • d) for some d G N, 
and Xj_|_i = Xi ■ d 

it) ti is {qi, d, gi+i) G ann(xj) for some d £ {I, . . . ,k}, and Xj+i = Xj. 

In the first case, index(tj) is the minimal j such that g^+i G and in the second case, index(tj) = d. 
For a downward trace vr, index(7r) is the minimal index(tj) for all ti occurring infinitely often in vr. 
Note that a downward trace vr can loop indefinitely at a node x G T when, from some point i > 
on, all the tj, j > i, are elements of ann (and all the xj are x). We say that a downward trace 
TT satisfies T = . . . , Tk\ if index(7r) is even. Given a strategy str, a promise pro on str, an 
annotation ann on str and pro, we say that ann is accepting if all downward traces induced by str, 
pro, and ann satisfy T . 

Lemma 6.6. A 2GAPT A accepts {T, V) iff there exist a strategy str for AonV, a promise 'pro for 
A on str, and an annotation ann/or A on str and pro such that ann is accepting. 

Proof. Suppose first that A accepts {T,V). By Lemma [6!4l there is a strategy str on V and a 
promise pro on str which are accepting. By definition of annotations on str and pro, it is obvious 
that there exists a unique smallest annotation ann on str and pro in the sense that, for each node x 
in T and each annotation ann', we have ann(x) C ann'(x). We show that ann is accepting. Let 
vr = (xo, go, ^o), (a^i, ^i), • • • be a downward trace induced by str, pro, and ann. It is not hard 
to construct a trace vr' = (xq, go), (x'^, g'j^), . . . induced by str and pro that is accepting iff vr is: 
first expand tt by replacing elements in vr of the form (:j:) with the detour asserted by ann, and then 
project TT on the first two components of its elements. Details are left to the reader. 

Conversely, suppose that there exist a strategy str on V, a promise pro on str, and an annotation 
ann on str and pro such that ann is accepting. By Lemma [6!4l it suffices to show that str and pro are 
accepting. Letvr = (xo, go), (2:1, 91), • • • be a trace induced by str and pro. It is possible to construct 
a downwards trace vr' induced by str, pro, and ann that is accepting iff vr is: whenever the step from 
(xj, qi) to (xj+i, gi+i) is such that Xj+i = Xj • c for some c G IN, the definition of traces induced 
by str and pro ensures that there is a = (g^, c, g^+i) G str(xj) such that the conditions from (f ) 
are satisfied; otherwise, we consider the maximal subsequence (xj, gj), . . . , (xj, gj) of tt such that 
Xj = Xj • c for some c G IN, and replace it with (xj,gj), (xj,gj). By definition of annotations. 
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there is ti = {qi, d, qi+i) G ann(xi) such that the conditions from (:|:) are satisfied. Again, we leave 
details to the reader. □ 

In the following, we combine the input tree, the strategy, the promise, and the annotation into 
one tree {T, (V, str, pro, ann)). The simplest approach to representing the strategy as part of the 
input tree is to additionally label the nodes of the input tree with an element of 2*5^^6 ^'5. However, 
we can achieve better bounds if we represent strategies more compactly. Indeed, it suffices to store 
for every pair of states q, q' G Q, at most four different tuples {q, c, q'): two for c € {e, —1} and 
two for the minimal n and maximal n' such that {q, [n], q'), {q, {n'),q') € str(y). Call the set of 
all representations of strategies Lstr- We can now define the alphabet of the combined trees. Given 
an alphabet S for the input tree, let S' denote the extended signature for the combined trees, i.e., 
S' = S X Lstr X 20^^ X 2Q><{i'-''=}xQ. 

Theorem 6.7. Let A be a 2GAPT running on T,-labeled trees with n states, index k and counting 
bound b. There exists a GNPT A running on T.' -labeled trees with 2^^('="' i°g'= i°g^') states, index 
nk, and b-counting constraints such that A' accepts a tree iff A accepts its projection on S. 

Proof. Let A = (S, b, Q, 6, qo,J^) with T = {^i, . . . , T^}- The automaton A' is the intersection 
of three automata Ai, A2, and A^. The automaton Ai is a Safety GNPT, and it accepts a tree 
(T, {V, str, pro, ann)) iff str is a strategy on V and pro is a promise on str. It is similar to the 
corresponding automaton in IIKSV02II . but additionally has to take into account the capability of 
2GAPTS to travel upwards. The state set of Ai is Qi := 2(Q^Q)lJ'9. Let P G Qi. Intuitively, 

(a) pairs {q,q') € P represent obligations for pro in the sense that if a node x of an input tree 
receives state P in a run of A, then {q, q') is obliged to be in pro(x); 

(b) states q G P are used to memorize head(str(y)) of the predecessor y of x. 

This behaviour is easily implemented via ^I's transition relation. Using false in the transition func- 
tion of Ai and thus ensuring that the automaton blocks when encountering an undesirable situation, 
it is easy to enforce Conditions (2) to (3) of strategies, and Condition (3) of promises. The initial 
state of Ai is {{qo,qo)}, which together with Condition (3) of promises enforces Condition (1) of 
strategies. It thus remains to treat Conditions (1) and (2) of promises. This is again straightforward 
using the transition function. For example, if (g, (n), q') G str(x), then we can use the conjunct 
{{q, q'), (>, n)) in the transition. Details of the definition of Ai are left to the reader. Clearly, the 
automaton Ai has 2*-^('^ ^ states and counting bound b. 

The remaining automata A2 and A3 do not rely on the gradedness of GNPTs. The automaton 
A2 is both a Safety and Forall GNPT. It accepts a tree (T, (F, str, pro, ann)) iff ann is an 
annotation. More precisely, A2 checks that all conditions of annotations hold for each node x 
of the input tree. The first two conditions are checked locally by analyzing the labels str(x) and 
ann(a;). The last two conditions require to analyze pro(x), str(y), and ann(y), where y is the 
parent of x. To access str(y) C Q x x Q and ann(y) C Q x {1, . . . , A;} x Q while processing 
X, A2 must memorize these two sets in its states. Regarding str(y), it suffices to memorize the 
representation from L^tr- The number of such representations is (46^)"^ , which is bounded by 
are 2 different annotations, and thus the overall number of states of A2 is 
bounded by 20('='^'-iog6'). 

The automaton A3 is a FORALL GNPT, and it accepts a tree (T, {V, str, pro, ann)) iff ann is 
accepting. By Lemma [631 it thus follows that A' accepts (T, {V, str, pro, ann)) iff A accepts (T, V). 
The automaton A3 extends the automaton considered in ||Var98ll by taking into account promise trees 
and graded moves in strategies. 
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We construct in several steps. We first define a nondeterministic parity word automaton 
(NPW) U over S'. An input word to U corresponds to a patli in an input tree to A'. We build U 
such that it accepts an input word/path if this path gives rise to a downward trace that violates the 
acceptance condition of A. An NPW is a tuple (S, S, M, so,J^), where S is the input alphabet, 
S is the set of states, M : 5 — > 2"^ is the transition function, sq € S is the initial state, and 
T = {Ti , ^2 • • • > -^fc} is a parity acceptance condition. Given a word w = a^ai . . . G S"^, a run 
^ = QoQi • • • of [/ on w is such that qq = sq and g^+i € M{qi, ai) for all z > 0. 

We define U = (S', S, M, sq,T') such that 5 = (Q x Q x {1, . . . , A;}) U {qacc}- Intuitively, 
a run of U describes a downward trace induced by str, pro, and ann on the input path. Suppose 
that X is the i-th node in an input path to [/, r is a run of U on that path, and the i-th state in r is 
Qprev,j)- This means that r describes a trace in which the state of A on the node x is q, while the 
previous state at the parent y of x was qprev Thus, A has executed a transition {{b),q) or ([6], q) to 
reach state q at x. For reaching the state qprev at y, A may or may not have performed a detour at y 
as described by ann. The j in {q, qprev, j) is the minimum index of q and any state encountered on 
this detour (if any). 

We now define the transition function M formally. To this end, let {q, qprev, j) G S and let 
a = (1/(3;), str(x), pro(x), ann(x)). To define M {{q, qprev, we distinguish between three 

cases: 

(1) if {qprev, q) pro(2;), then M {{q, qprev, j),cr) = 0; 

(2) otherwise and if H = {c : {q, c,q) € ann(2;)} is non-empty and some member of H has an odd 
index, set M{{q, qprev, j),cr) = {qacc}; 

(3) if neither (1) nor (2) apply, then we put {q', q'prev,j') ^ M{{q, qprev, j),cr) iff 

• {q, c, q') S str(x), with c G {{b)) U [[b]], q'p^.^^ = q and / = index((;'); or 

• {q,d,q'prev) ^ ann(x) for some d, {q'prev,c,q') G str(x) for some c G ((6)) U [[6]], and 
/ = mm{d, index((/')). 

In addition, M{qacc,(y) = {qacc}, for all a G S'. For (1), note that if {qprev, q) pro(x), then 
pro does not permit downwards traces in which A switches from qprev to q when moving from the 
pai^ent of x to x. Thus, the cuiTcnt run of U does not correspond to a downward trace, and U does 
not accept. The purpose of (2) is to check for traces that "get caught" at a node. 

The initial state sq of U is defined as {qQ,qQ,£), where £ is such that qo G J^e. Note that 
the choice of the second element is ar^bitrary, as the local promise at the root of the input tree 
is irrelevant. Finally, the parity condition is T' = {T{,J^2, • ■ • ,^k+i}, where = 0, = 
Q X Q X {1} U {qacc} and for each £ with 2 < ^ < + 1, we have J^^ = Q x Q x - 1}. Thus, U 
accepts a word if this word corresponds to a path of the input tree on which there is a non-accepting 
trace. 

In order to get ^3, we co-determinize the NPW U and expand it to a tree automaton, i.e., a 
FORALL GNPT on S'. That is, we first construct a deterministic parity word automaton U that 
complements U, and then replace a transition M{q, a) = q' mU hy & transition 

Mt{q,a) = {{{^e,,),{<,Q))} 

in A3 where the states of U are encoded by some set Y of variables and for every state q' , the formula 
9q> G B{Y) holds only in the subset of Y that encodes q' . By ||Saf89HTho97l . the automaton U has 
{nk)"^^ < 2"'^'''°§"-^ states and index nk, thus so does A-^. 

By Lemma ld!2l we can intersect the two Safety automata Ai and A2 obtaining a Safety 
automaton with 2'-^(*^" '"s'' ) states and counting bound b. Moreover, by Lemma \6A\ the obtained 
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Safety automaton can be intersected with the For all automaton ^3 yielding the desired GNPT 
N with 2C('="' i°g'= i°s''') states, counting bound h, and index nk. □ 

6.3. Emptiness of GNPTs. By extending results of IIKV981 iKVWOOl IKSV02I . we provide an al- 
gorithm for deciding emptiness of GNPTs. The general idea is to translate GNPTs into alternating 
(non-graded) parity automata on words, and then to use an existing algorithm from IIKV98II for 
deciding emptiness of the latter. 

A singleton-alphabet GNPT on full cu-trees (cu-lGNPT) is a GNPT that uses a singleton alpha- 
bet {a} and admits only a single input tree (T^^, V), where T^^ is the full u-tree and V labels 
every node with the only symbol a. Our first aim is to show that every GNPT can be converted 
into an w-lGNPT such that (non)emptiness is preserved. We first convert to a IGNPT, which is a 
single-alphabet GNPT. 

Lemma 6.8. Let A = (S, b, Q, 5, qo,T) be a GNPT. Then there is a IGNPT A' = ({a}, 6, Q', 5', q'^, T') 
with L{A) = ijfL{A') = and \Q'\ < \Q\ x |S| + 1. 

Proof. Let Q C 2^. We may assume w.l.o.g. that S C 2^ for some set Z with Z n y = 0. Now 
define the components of A' as follows: 

. Q' = {{s}} U{qUa,\q eQ Aa eJ:} C 2^', where Y' = Y\SZiS {s}; 

• q'o = {«}; 

. 6'{{s}, a) = {(true, (<, 1)), (A,e,„ y A A,6y\,o -2/, (>, 0)), {s, (<, 0))}; 

• d'{q, a) =6{qnY,qnZ)U {{s, (<, 0))} for all g € Q with q / {s}; 

. r = . . . ,^[} with^; = {q e Q' \ qnQ e T^} if T = {Ti, . . .,J^k}. 

It is easy to see that A accepts (T, V) iff A' accepts (T', V), where T' is obtained from T by 
adding an additional root, and V' assigns the label a to every node in T'. Intuitively, the additional 
root enables A' to "guess" a label at the root of the original tree. Then, the label will be guessed 
iteratively. □ 

In the next step, we translate to tj-lGNPTs. 

Lemma 6.9. Let A = {{a},b,Q,6,qo,J^) be a IGNPT. Then there exists an uj-lGNPT 
A' = ({a}, 6, Q', 5', go, -^') such that C{A) = ijf C{A') = and \Q'\ = \Q\ + 1. 

Proof. Define the components of A' as follows: 

• Q' = Q\J {{±}} C 2^', where Y' = Y\^ {±}; 

. if %,a) = set5'((/,a) = {(^i A 6), • • • , (^fc A ^fc)}, for all 

q^Q with -L ^ g; 

• 5'{q, a) = {(^_L, (<, 0))} for all g G Q with _L G 

. T' = . . . , J^fc} with T[ = Ti, and J^"; = J^j U {g G Q' | _L € q}, for 2 < i < k, ii 
F={J'i,...,Tk}. 

It is easy to see that C{A) / iff A' accepts (T^;, V). Accepting runs can be translated back and 
forth. When going from runs of A to runs of A' , this involves of the children of each node with 
nodes labeled {_L}. □ 
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We are now ready to translate GNPTs to alternating word automata. A single-alphabet alter- 
nating parity word automaton (lAPW) is a tuple A = ({a}, Q, 6, qo,T), where {a} is the alphabet, 
Q, qo, and T are as in FEAs, and 6 : Q x {a} — B^{Q). There is only a single possible input to 
a lAPW, namely the infinite word aaa ■ ■ ■ . Intuitively, if A is in state q on the i-th position of this 
word and 5{q, a) = q' \J {q f\ q"), then A can send to position i + 1 either a copy of itself in state q' 
or one copy in state q and one in state q" . The input word is accepted iff there is an accepting run of 
A, where a run is a Q-labeled tree (T^ , r) such that 

• r{root{Tr)) = qo\ 

• for all y G Tr with r(y) = q and 6{q, a) = 9, there is a (possibly empty) set 5 C Q such that S 
satisfies 9 and for all q' G S, there is j G IN such that y ■ j ^ %■ and r{y ■ j) = q' . 

As for FEAs, a run {Tr,r) is accepting if all its infinite paths satisfy the acceptance condition. 

For an w-lGNPT A = {{a}, b, Q, S, qo,T), q ^ Q, and P Q Q, the function is_motheryi(g, P) 
returns true if there is an infinite word t G P'^ that satisfies the counting constraint 5{q, a), and false 
otherwise. 

Lemma 6.10. For every co-lGNPT A = {{a},b,Q,6,qo,J='), the lAPW A' = {{a},Q,5' ,qo,J^) is 
such that C{A) = iffC{A') = 0, where for all q e Q, 

6'{q,a)= V f\q. 

PCQ s.t. \s.motherA{q,P) Q^P 

Proof, (sketch) First assume that {T^, V) G J^{A). Then there exists an accepting run {Ti^,r) of A 
on {T^, V). It is not difficult to verify that {T^,r) is also an accepting run of A'. Conversely, assume 
that a'^ G C{A'). Then there is an accepting run (T^, r) of A'. We define an accepting run {Ti^,r') 
of A on {Ti^, V) by inductively defining r'. Along with r', we define a mapping t : T^^ Tr such 
that r'(x) = r(r(x)) for all x G T^. To start, set r'{root{T^)) = qo and T(root(Tj^)) = root(Tr). 
For the induction step, let x € such that r'{y) is not yet defined for the successors y of x. Since 
{Tr,r) is a run of A' and by definition of 6', there is a P C Q such that (i) is_motheryi(r(T(a;)), P) 
and (ii) for all q ^ P, there is a successor y of r(x) in Tr with r{y) = q. By (i), there is a word 
t = qiq2 • • • G P^ that satisfies the counting constraint 5(r(r(a;)), a) = 5{r'{x),a). For all i > 1, 
define r'{x ■ i) = qi and set t{x • i) to some successor y of r(x) in Tr such that r{y) = qi (which 
exists by (ii)). It is not hard to check that {Tt^,r') is indeed an accepting run of A on (T^^, V). □ 

For a lAPW A = ({a}, Q, 5, qo,T), q ^ Q, and P Q Q, the function is_mother^(g, P) returns 
true if P satisfies the Boolean formula 5{q, a), and false otherwise. 

Since the transition function of the automaton A' from Lemma [6. 101 is of size exponential in 
the number of states of the cj-lGNPT A, we should not compute A' explicitly. Indeed, this is not 
necessary since all we need from A' is access to T and is_mother^' and, as stated in the next lemma, 
is_mother^/ coincides with is_motheryi. The lemma is an immediate consequence of the definition 
of the 1 APW in LemmailOl 

Lemma 6.11. Let A and A' be as in Lemma \6J0\ with state set Q. Then is_motheryi = is_mother^/. 

To decide the emptiness of lAPWs, we use the algorithm from IIKV98I . It is a recursive pro- 
cedure that accesses the transition function of the lAPW only via is_mother. If started on a lAPW 
with n states and index k, it makes at most 2'^('^^°§") calls to is_mother and performs at most 
20{k\ogn) additional steps. 

To analyze its runtime requirements, we first determine the complexity of computing is_motherQ 



We remark that the analogous Lemma 1 of IKSV02I is flawed because it considers only trees of finite outdegree. 
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Lemma 6.12. Let A = ({a}, 6, Q, 5, qo,.!F) be an uj-lGNPT with n states and counting bound b. 
Then is_motheryi can be computed in time &'^{'°s"). 

Proof. Assume that we want to check whether is_mother/i(g, P), for some q ^ Q and P Q Q. Let 
^1, . . . , ^fc be all formulas occurring in C := 6{q, a). We construct a deterministic Biichi automaton 
A' = (S', Q' , Qq, 5' , F') on infinite words that accepts precisely those words t G P'^ that satisfy C: 

• S' = P; 

. Q' = {0,...,6}'=; 

• d'o = {o}'^; 

• 5' {{ii, . . . ,ik),p) is the vector {ji,---,jk), where for all h € {l,...,k}, we have 
jh = min{6, i/^ + 1} if p € S' satisfies 6'/i, and jh = ih otherwise; 

• F' consists of those tuples (ii, . . . , ik) such that for all /i G {1, . . . , k}, 

(1) there is no (9^, (<, r)) € C with r < i^, 

(2) for all (6*/!, (>, r)) G C, we have > r. 

By definition of GNPTs, the cardinality of C is bounded by logn. Thus, A' has 6'°S" states. It 
remains to note that the emptiness problem for deterministic Biichi word automata (is NLogSpace- 
complete IIVW94II and) can be solved in linear time IIVar07ll . □ 

Now for the runtime of the algorithm. Let A be a GNPT with n states, counting bound h, and 
index k. To decide emptiness of A, we convert A into an cu-lGNPT A' with n + 1 states, counting 
bound h, and index k, and then into a lAPW A" with n + 1 states and index k. By Lemma [6.12[ we 
obtain the following result. 

Theorem 6.13. Let A = (E, 6, Q, 5, qo,J^) be a GNPT with \Q\ = n, and index k. Then emptiness 
of A can be decided in time {b + 2)^('^-'°s"). 



6.4. Wrapping Up. Finally, we are ready to prove Theorem 14.21 which we restate here for conve- 
nience. 

Theorem 14.21 The emptiness problem for a 2GAPT A = (S, b, Q, 5, qo,J-) with n states and index 
k can be solved in time (5 + 2)»("'-'=' i°g*^-i°g*'). 

Proof By Theorem[6Jl we can convert A into a GNPT A' with 2C('^"' i°g'= i°g''') states, index nk, 
and counting bound b. Thus, Theorem 1 6 . 1 3 1 yields the desired result. □ 

A matching ExpTlME lower bound is inherited from nongraded, one-way alternating tree au- 
tomata. 



7. Conclusion 

We have studied the complexity of /x-calculi enriched with inverse programs, graded modalities, 
and nominals. Our analysis has resulted in a rather complete picture of the complexity of such 
logics. In particular, we have shown that only the fully enriched /x-calculus is undecidable, whereas 
all its fragments obtained by dropping at least one of the enriching features inherit the attractive 
computational behavior of the original, non-enriched //-calculus. 

From the perspective of the description logic OWL, the picture is as follows. Undecidability of 
the fully enriched yU-calculus means that OWL extended with fixpoints is undecidable. The decid- 
able /z-calculi identified in this paper give rise to natural fragments of OWL that remain decidable 
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when enriched with fixpoints. Orthogonal to the investigations carried out in this paper, it would 
be interesting to understand whether there are any second-order features that can be added to OWL 
without losing decidability. In particular, decidability of OWL extended with transitive closure is 
still an open problem. 

Acknowledgements. We are grateful to Orna Kupferman and Ulrike Sattler for helpful discussions 
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